533M Facebook users' phone numbers and personal data have been leaked online • Hacker News Board

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#21

Post by JoshTko » Sat, Apr 03, 2021, 4:27 PM UTC

rikkipitt wrote: post #14

spicyramen wrote: post #7

Earlier quoted context omitted.

Same here, i started recieving both calls and SMS which the last i find more annoying. I do use Android and these ones haven't been able to be detected as spam

I’m on iOS and don’t think there’s a way of blocking unsolicited calls until after the fact... I hope to be proven wrong though! The odd thing is, the calls often come through having a caller ID very similar to my own number.

on iOS there is a lifesaving phone setting of sending unknown callers straight to voicemail.

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#22

Post by brettermeier » Sat, Apr 03, 2021, 4:28 PM UTC

asdfasgasdgasdg wrote: post #11

bitcharmer wrote: post #4

These events are not a matter of if but when. And since the overwhelming majority of the people in my social circles has zero understanding of the real nature of the relationship between them - FB users and FB I just hope this will become increasingly frequent and painful experience for them. As in: I really hope this will get FB users in trouble as a result of identity theft etc. This may sound extremely cynical but…

> people in my social circles ... I just hope this will become increasingly frequent and painful experience for them. Very strange to wish harm upon your friends with the hope that that will convince them to join your side in a political fight! I would suggest instead that you only wish that if it becomes a painful experience, they would realize why and renegotiate their relationship with FB. Typically wishing pain o…

true

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#23

Post by tyingq » Sat, Apr 03, 2021, 4:29 PM UTC

rikkipitt wrote: post #5

I’ve been getting a lot of automated/unsolicited calls recently. Begs the question if this might be the source of my woes. Is there a trustworthy phone number version of https://haveibeenpwned.com ?

"Is there a trustworthy phone number version of https://haveibeenpwned.com?"

An "exact" google search excluding adjacent phone numbers seems to work well for my numbers, and culls a lot (not all) of the autogen pages. So if your number was 212-555-1239, search Google with these strings:

  "(212)555-1239" -1240 -1238

  "212-555-1239" -1240 -1238

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#24

Post by zeta0134 » Sat, Apr 03, 2021, 4:29 PM UTC

criddell wrote: post #20

rikkipitt wrote: post #5

I’ve been getting a lot of automated/unsolicited calls recently. Begs the question if this might be the source of my woes. Is there a trustworthy phone number version of https://haveibeenpwned.com ?

I've been getting a lot more recently as well and I figured it was due to the phone companies promising to get rid of caller id spoofing this year so scammers are working overtime until they can't anymore.

Oh, is that a real thing that's happening? Caller ID spoofing is the main reason I hold onto my phone number from [small town] Texas, since only my immediate family ever calls me from there, so I somewhat reliably know anything else from that area code is a scammer.

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#25

Post by throwawaybchr » Sat, Apr 03, 2021, 4:31 PM UTC

Is Mark Zuckerberg's number one of them?

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#26

Post by timdaub » Sat, Apr 03, 2021, 4:31 PM UTC

rikkipitt wrote: post #5

I’ve been getting a lot of automated/unsolicited calls recently. Begs the question if this might be the source of my woes. Is there a trustworthy phone number version of https://haveibeenpwned.com ?

intelx.io

Can't say too much about trustworthyness though.

U could also just download the set from e.g. raid forum to check for yourself.

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#27

Post by rikkipitt » Sat, Apr 03, 2021, 4:32 PM UTC

JoshTko wrote: post #21

rikkipitt wrote: post #14

Earlier quoted context omitted.

I’m on iOS and don’t think there’s a way of blocking unsolicited calls until after the fact... I hope to be proven wrong though! The odd thing is, the calls often come through having a caller ID very similar to my own number.

on iOS there is a lifesaving phone setting of sending unknown callers straight to voicemail.

I toyed with that for a while but I kept missing important work calls. I might have a look for an app later, but I have a feeling it might not exist...

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#28

Post by londons_explore » Sat, Apr 03, 2021, 4:32 PM UTC

Looks like this is the "To match users to their friends by phone number, you need an API which can take as input a phone number, and return information about if that number has an associated account" problem.

There is no way to let a user find their friends on a service without such an API. Yet if you have such an API, someone can simply brute force all phone numbers worldwide (there are only 10^10), and now they have a database of all users...

Rate limits can help defend, but considering many users might have 1000 phone numbers in their address book, you can't set the rate limit very low without impacting user experience. Attackers can reduce the search space dramatically by only checking phone numbers that resolve to an active line (using VoIP stuff to test a number).

The only real solution is for your app not to have a "Here is a list of your friends already in the app" screen... But as you can imagine that means you won't get any user growth or VC funding...

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#29

Post by KMag » Sat, Apr 03, 2021, 4:33 PM UTC

bitcharmer wrote: post #4

These events are not a matter of if but when. And since the overwhelming majority of the people in my social circles has zero understanding of the real nature of the relationship between them - FB users and FB I just hope this will become increasingly frequent and painful experience for them. As in: I really hope this will get FB users in trouble as a result of identity theft etc. This may sound extremely cynical but…

It became necessary to destroy the town to save it?

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#30

Post by hourislate » Sat, Apr 03, 2021, 4:33 PM UTC

I_am_tiberius wrote: post #16

Would like to know if non Facebook users are included because Facebook has non Facebook user's phone numbers due to the fact that Whatsapp uploads the entire phonebook to Whatsapp. That means Facebook is likely to know your phone number although you don't use Facebook or Whatsapp.

It's sick that they are allowed to get away with this. It's basically a botnet stealing information.